This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer File: l1JqhRIT5aY6wpR47RNnCCn8oaU.cer (raw, json) Hash identifier: 8sdC+QU/I+JxTPozUcdHsrDed/eRG5l3fPzxMG1g0ko= Subject key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F297328C1EFB53ADEA413FAC69CA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200098 IP: 91.223.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:29:73:28:c1:ef:b5:3a:de:a4:13:fa:c6:9c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97526a851213e5a63ac29478ed13670829fca1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:92:d6:b9:f8:e5:c7:18:80:44:66:bc:43: 6c:52:ef:88:8d:4e:84:4f:30:a3:22:60:53:fe:97: 75:e9:6d:cd:2b:b1:86:05:72:71:fc:e8:85:4f:00: d4:a3:ab:13:4d:1a:5b:b5:21:8c:64:55:3a:c0:58: e0:e2:ca:1f:1b:37:26:40:59:42:c8:a9:21:9e:60: 09:fa:34:53:ea:ed:14:b0:24:c5:f6:87:a2:31:c3: b3:26:31:de:54:85:62:a6:a6:77:b4:62:6e:01:d2: 95:b4:1d:05:14:28:7d:95:fd:b5:ec:aa:ee:96:63: 06:e8:8f:1a:f5:79:7d:1e:b6:6e:74:f4:84:0f:61: 9a:af:8c:20:77:b1:f2:14:16:ad:e6:05:ca:d0:29: b3:d0:a2:90:87:f9:d0:b7:9a:be:ea:10:66:44:0e: 1e:f6:0c:8e:cc:d0:23:f4:60:d1:77:1b:6f:d1:72: 13:33:43:3d:d2:0e:d9:4f:34:2e:05:c7:b2:fa:1e: c9:82:14:9a:fa:fc:33:b0:a0:f0:73:9b:a0:88:8e: 08:04:c2:58:23:bd:be:42:4a:c0:8e:0f:2d:d2:51: ca:be:6a:86:38:da:07:15:64:e4:62:e4:e1:87:67: fe:06:c6:fb:42:3e:3c:63:cf:0b:fd:78:b7:c3:d2: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.147.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200098 Signature Algorithm: sha256WithRSAEncryption 1e:6d:db:9a:f9:eb:07:ec:92:f0:1c:fc:34:fa:70:9b:2d:0d: db:21:68:c2:77:f1:c7:5c:fd:71:c4:86:b4:05:0a:74:cb:db: cf:88:41:c7:44:41:46:75:af:e2:7c:ec:90:74:51:e2:1c:0f: a1:4e:7a:69:a5:3a:21:d2:2f:fd:2a:fc:cb:4e:a8:7a:63:37: ce:d4:dd:c5:9f:fb:d4:91:79:ed:e4:a0:f5:df:fa:ba:38:ea: e8:5f:44:3f:1d:a0:e8:95:4e:81:51:d7:88:6e:61:0a:13:1d: 41:2e:07:5c:59:ce:7d:8c:e5:54:80:e0:ed:a4:0d:c4:be:56: b8:db:9f:ab:8f:53:c0:9f:1c:83:a0:22:fb:86:f2:a1:e7:ab: 0d:52:23:b8:a4:9f:a1:e6:ce:9b:41:eb:1f:8d:3a:0d:ce:0e: 91:e0:d6:ac:0b:84:ca:cc:ea:13:45:76:ca:05:d9:72:e8:d9: 58:15:28:2c:82:4b:58:69:0b:05:db:ee:36:48:bb:f8:65:98: c8:5b:8f:88:ae:05:62:cf:ab:37:f2:c8:e3:13:b9:de:66:98: 06:f7:fd:c9:86:bd:d8:bf:70:67:dd:dc:c8:ef:70:a9:bf:cd: 25:f7:b9:ee:5e:38:7b:92:40:e0:95:8e:4e:98:6e:6e:23:b0: a7:e2:05:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fylzKMHvtTrepBP6xpykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzUyNmE4NTEyMTNlNWE2M2FjMjk0NzhlZDEzNjcwODI5ZmNhMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWCS1rn45ccYgERmvENsUu+IjU6E TzCjImBT/pd16W3NK7GGBXJx/OiFTwDUo6sTTRpbtSGMZFU6wFjg4sofGzcmQFlC yKkhnmAJ+jRT6u0UsCTF9oeiMcOzJjHeVIVipqZ3tGJuAdKVtB0FFCh9lf217Kru lmMG6I8a9Xl9HrZudPSED2Gar4wgd7HyFBat5gXK0Cmz0KKQh/nQt5q+6hBmRA4e 9gyOzNAj9GDRdxtv0XITM0M90g7ZTzQuBcey+h7JghSa+vwzsKDwc5ugiI4IBMJY I72+QkrAjg8t0lHKvmqGONoHFWTkYuThh2f+Bsb7Qj48Y88L/Xi3w9J/kQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJdSaoUSE+WmOsKUeO0TZwgp/KGlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzRiZTg2 YS0wYWViLTRiMTgtYTZjNC1lMmRjZTkzYTQ1MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNGJlODZh LTBhZWItNGIxOC1hNmM0LWUyZGNlOTNhNDUyOS8xL2wxSnFoUklUNWFZNndwUjQ3 Uk5uQ0NuOG9hVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+TMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMNojANBgkqhkiG9w0BAQsFAAOCAQEAHm3bmvnrB+yS8Bz8NPpwmy0N2yFownfx x1z9ccSGtAUKdMvbz4hBx0RBRnWv4nzskHRR4hwPoU56aaU6IdIv/Sr8y06oemM3 ztTdxZ/71JF57eSg9d/6ujjq6F9EPx2g6JVOgVHXiG5hChMdQS4HXFnOfYzlVIDg 7aQNxL5WuNufq49TwJ8cg6Ai+4byoeerDVIjuKSfoebOm0HrH406Dc4OkeDWrAuE yszqE0V2ygXZcujZWBUoLIJLWGkLBdvuNki7+GWYyFuPiK4FYs+rN/LI4xO53maY Bvf9yYa92L9wZ93cyO9wqb/NJfe57l44e5JA4JWOTphubiOwp+IF+A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:35 2026 by rpki-client